[solved] access from lan to vpn, without vpn to lan

RouterOS Beginner Basics
1

VPN LAN acces.jpg
Hy.
Need some help, I am a newbie.
Like in the diagram above, I have one mikrotik router, with PPTP server enabled and functional.
What I want to is to be able to access from LAN (ip like: 172.30.7.x) to pptp client (ip like: 192.168.1.x) but not from pptp to lan.
Normally, with no firewall rule, I have access from LAN to PPTP client and from PPTP client to LAN. But to disable access from PPTP to LAN I have one firewall that drops packets from 192.168.0.0/16 to 172.30.7.0/24.
Which would be the right solution to be able to access PPTP from LAN without access LAN from PPTP client.

2 
/ip firewall filter
add chain=forward action=accept src-address=192.168.1.0/24 dst-address=172.30.7.0/24 connection-state=established,related
add chain=forward action=drop src-address=192.168.1.0/24 dst-address=172.30.7.0/24 connection-state=new,invalid

-Chris

3

Thank’s Chris, just what I needed.